This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft File: DxoYFt02i3fPMr0hqeC61d9s3_A.mft (raw, json) Hash identifier: MKcNr704QEO2pbgCpmhWzpaCdHeVEGK86l4UBNFPbhA= Subject key identifier: FF:3A:E3:61:C0:90:A9:12:36:FE:B6:A5:E9:65:F3:58:2B:A7:0F:D6 Authority key identifier: 0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0 Certificate issuer: /CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0 Certificate serial: 019B65B12D15EFFA3EA6C070EB1E6C403DEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft Manifest number: 179B Signing time: Sun 28 Dec 2025 16:01:08 +0000 Manifest this update: Sun 28 Dec 2025 16:01:08 +0000 Manifest next update: Mon 29 Dec 2025 16:01:08 +0000 Files and hashes: 1: DxoYFt02i3fPMr0hqeC61d9s3_A.crl (hash: ntx9QU0+pTwahIJ3GHcH3EJsDfjfKcJl92sVEI0wgOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Dec 2025 10:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:65:b1:2d:15:ef:fa:3e:a6:c0:70:eb:1e:6c:40:3d:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f1a1816dd368b77cf32bd21a9e0bad5df6cdff0 Validity Not Before: Dec 28 16:01:08 2025 GMT Not After : Dec 29 16:01:08 2025 GMT Subject: CN=ff3ae361c090a91236feb6a5e965f3582ba70fd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f4:51:93:f1:42:bc:8e:80:a1:33:54:a9:ae: 15:a3:fc:b4:8f:cb:de:05:70:1c:60:48:92:1d:6b: b8:90:e0:0f:9a:b5:8d:d9:5d:8f:0a:1c:8a:fd:91: 72:e6:6a:aa:e2:0a:1b:9d:88:9b:9d:cb:5a:35:86: 47:58:36:eb:e5:b6:52:53:5b:b4:34:69:59:20:73: fc:f9:be:b3:fa:c0:c2:12:82:78:5b:4e:7a:6c:c4: bf:3e:b3:6a:4d:b6:f4:0a:b9:a1:8a:93:9a:92:a2: 4e:1f:aa:3d:05:d0:6e:78:6f:6e:fb:a3:12:23:ef: e2:e0:8b:6c:ac:32:a6:a7:1f:79:39:5a:fc:82:82: 95:16:9c:eb:71:57:99:81:33:9e:3d:9f:f4:c2:91: 0b:a7:10:74:f7:d3:ae:fa:0a:63:e2:85:51:55:5e: 81:88:62:4c:d6:0a:1b:b5:1c:3b:79:fa:e5:be:ee: 14:2c:82:1e:ab:f8:ce:97:c7:aa:57:87:5c:c7:7a: b2:dc:9d:8c:88:bb:d1:4a:5c:be:8c:3c:e4:09:0e: 9d:75:b1:b3:12:d6:69:bb:e8:00:fb:14:d0:24:f4: 95:b9:75:1e:5e:6b:1b:e8:ab:06:1b:82:3d:6c:d4: 8f:c4:2e:c4:6f:79:9c:8b:1f:0e:fd:6f:3b:e6:8d: 0e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:3A:E3:61:C0:90:A9:12:36:FE:B6:A5:E9:65:F3:58:2B:A7:0F:D6 X509v3 Authority Key Identifier: keyid:0F:1A:18:16:DD:36:8B:77:CF:32:BD:21:A9:E0:BA:D5:DF:6C:DF:F0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DxoYFt02i3fPMr0hqeC61d9s3_A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/7b2dac-0fb4-4309-8861-7231146d156f/1/DxoYFt02i3fPMr0hqeC61d9s3_A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:5c:e1:05:da:03:4a:83:97:72:3f:a9:b2:cc:74:a0:b3:e5: 4e:df:37:da:3a:db:27:70:f8:71:f0:4f:0d:21:95:0c:10:cc: 6e:e7:ea:3b:a5:6b:56:3e:f6:e1:70:76:fc:41:29:f0:46:5d: 1d:4f:f1:ce:1c:8f:aa:e9:33:31:06:70:fc:da:75:ce:75:c7: 37:dd:57:d7:22:63:e3:76:91:81:82:af:53:ca:7e:d0:11:45: 3b:64:16:d4:e8:4f:2d:f4:18:2d:40:ab:fc:28:71:38:e8:cb: 3e:1f:47:26:23:c1:35:6e:c3:99:c8:e1:af:0f:ce:57:b5:1d: 8e:25:6a:90:fe:6e:c1:25:3f:c7:2b:7c:6a:bf:ac:21:fe:fd: de:ff:e6:d6:1b:ad:34:29:83:ab:5b:bc:8f:12:5b:77:b3:b2: 9a:91:1e:5d:23:a4:91:a9:02:ac:1b:53:ef:3a:dd:f3:f2:81: 8f:44:47:15:f5:d6:2e:02:9d:b9:1e:c3:8a:3f:e2:cb:32:dc: 05:b5:19:ff:f2:a0:b7:5c:e8:e0:5f:2f:3a:1b:98:42:b3:9b: f7:d6:6d:11:39:56:97:9c:5a:43:74:4f:3a:6a:8c:e1:dd:bd: bd:4f:9e:70:d2:56:fb:02:56:ca:f3:4a:2a:00:f6:08:42:69: 55:62:75:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZtlsS0V7/o+psBw6x5sQD3vMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmMWExODE2ZGQzNjhiNzdjZjMyYmQyMWE5ZTBiYWQ1ZGY2 Y2RmZjAwHhcNMjUxMjI4MTYwMTA4WhcNMjUxMjI5MTYwMTA4WjAzMTEwLwYDVQQD EyhmZjNhZTM2MWMwOTBhOTEyMzZmZWI2YTVlOTY1ZjM1ODJiYTcwZmQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfRRk/FCvI6AoTNUqa4Vo/y0j8ve BXAcYEiSHWu4kOAPmrWN2V2PChyK/ZFy5mqq4gobnYibnctaNYZHWDbr5bZSU1u0 NGlZIHP8+b6z+sDCEoJ4W056bMS/PrNqTbb0CrmhipOakqJOH6o9BdBueG9u+6MS I+/i4ItsrDKmpx95OVr8goKVFpzrcVeZgTOePZ/0wpELpxB099Ou+gpj4oVRVV6B iGJM1gobtRw7efrlvu4ULIIeq/jOl8eqV4dcx3qy3J2MiLvRSly+jDzkCQ6ddbGz EtZpu+gA+xTQJPSVuXUeXmsb6KsGG4I9bNSPxC7Eb3mcix8O/W875o0OEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP8642HAkKkSNv62pell81grpw/WMB8GA1UdIwQY MBaAFA8aGBbdNot3zzK9IangutXfbN/wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHhvWUZ0MDJpM2ZQTXIwaHFlQzYxZDlzM19BLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS83YjJkYWMtMGZiNC00MzA5LTg4NjEt NzIzMTE0NmQxNTZmLzEvRHhvWUZ0MDJpM2ZQTXIwaHFlQzYxZDlzM19BLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZS83YjJkYWMtMGZiNC00MzA5LTg4NjEtNzIzMTE0NmQxNTZm LzEvRHhvWUZ0MDJpM2ZQTXIwaHFlQzYxZDlzM19BLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAolzhBdoD SoOXcj+pssx0oLPlTt832jrbJ3D4cfBPDSGVDBDMbufqO6VrVj724XB2/EEp8EZd HU/xzhyPqukzMQZw/Np1znXHN91X1yJj43aRgYKvU8p+0BFFO2QW1OhPLfQYLUCr /ChxOOjLPh9HJiPBNW7Dmcjhrw/OV7UdjiVqkP5uwSU/xyt8ar+sIf793v/m1hut NCmDq1u8jxJbd7OympEeXSOkkakCrBtT7zrd8/KBj0RHFfXWLgKduR7Dij/iyzLc BbUZ//Kgt1zo4F8vOhuYQrOb99ZtETlWl5xaQ3RPOmqM4d29vU+ecNJW+wJWyvNK KgD2CEJpVWJ1OA== -----END CERTIFICATE-----Generated at Sun Dec 28 18:55:44 2025 by rpki-client